Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17e30daf-f11a-4af6-8f47-661a735a22e9.roa
File: 17e30daf-f11a-4af6-8f47-661a735a22e9.roa (raw, json)
Hash identifier: dUlVk7FisG986wwLKZ7GLmtMsRXSViBJs2OtDel8khc=
Subject key identifier: FC:5B:AE:76:06:75:22:EB:44:12:E4:83:D2:92:C2:91:AF:CD:8C:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 735C7D04B5B0C07235B406F9C30570A6489F846D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17e30daf-f11a-4af6-8f47-661a735a22e9.roa
Signing time: Fri 07 Aug 2026 04:30:33 +0000
ROA not before: Fri 07 Aug 2026 04:30:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5c:7d:04:b5:b0:c0:72:35:b4:06:f9:c3:05:70:a6:48:9f:84:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=89596cb5384b205702a26de9ea4aa79615ceac5498a37d1ff184759b8be30837, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:e6:be:de:e4:dd:14:c5:2c:65:77:fa:26:
e7:df:e5:4d:a6:58:58:6f:d6:16:72:06:b5:66:09:
20:63:34:8d:30:c6:52:4c:d7:47:bb:7f:b9:15:03:
a0:60:df:a8:e9:cd:21:0d:93:6a:cc:82:9d:6d:5f:
50:24:39:f4:76:e5:78:01:16:f5:ae:57:82:ee:5d:
1d:38:4b:7a:9e:41:67:8e:06:8d:cd:ba:81:3c:90:
84:a3:24:1c:6c:c7:fd:70:f8:cf:4e:63:73:dd:52:
26:ee:39:fb:1b:b5:ad:50:e9:fe:a1:56:e8:5f:01:
5f:2f:45:8f:6c:06:f8:4d:9b:e4:5b:34:f0:06:e9:
d4:6b:f2:7b:c2:f3:b7:58:c8:fe:f8:fb:cf:87:75:
09:f1:3f:da:90:eb:6c:de:92:6c:88:bc:15:e2:5b:
83:dd:8d:0c:69:57:8e:a2:2d:28:d6:14:bd:ed:07:
7c:b7:0a:08:7f:c3:00:2b:08:bd:6e:2d:58:b2:6d:
f0:83:94:3d:d5:8c:21:f9:0d:e2:fa:24:45:59:63:
f1:73:ce:3c:50:02:f5:7d:ff:08:de:ad:c0:5f:97:
80:98:11:cc:6f:0f:9b:53:58:7e:9b:b6:83:77:9b:
f9:bf:ca:7d:60:ee:46:07:3f:1b:b5:17:97:9d:7d:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:AE:76:06:75:22:EB:44:12:E4:83:D2:92:C2:91:AF:CD:8C:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17e30daf-f11a-4af6-8f47-661a735a22e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b6:84:cb:05:a3:5e:5a:12:8e:f7:7b:1e:c2:a3:f0:b8:10:4a:
4d:2d:89:fe:f4:6e:1f:c3:9e:58:2a:7f:3a:63:35:5a:b0:62:
58:66:8d:69:a4:00:c3:02:4e:9f:20:81:ef:5c:63:dd:21:8c:
ac:3d:be:5c:ff:30:a9:3d:f4:0f:6c:c1:c3:c3:93:15:d0:71:
26:ae:7e:a5:95:00:62:76:c5:93:be:8d:2f:85:39:77:58:1d:
d9:a6:8d:fa:2c:bf:c1:83:82:b7:87:91:7e:c0:bf:50:ef:11:
a0:de:e3:91:b4:3d:aa:24:db:77:35:04:da:d3:06:4d:67:82:
be:27:9f:5b:b9:be:10:ee:aa:2b:3c:db:37:f2:9e:02:a5:13:
dc:50:bf:a3:b1:48:20:34:31:48:cb:77:51:78:b3:58:78:9f:
15:34:a5:d1:7d:67:42:78:2e:a2:d4:27:cf:fb:61:52:46:97:
41:da:74:72:8b:44:21:c3:0f:dd:f2:ac:c0:62:81:41:2b:57:
2e:8c:93:c8:f5:93:94:e9:b3:9c:52:af:31:86:d6:3c:af:78:
32:3c:58:d7:91:5f:5c:1e:59:52:e0:44:d4:b6:84:b3:a8:6f:
38:d9:73:ec:58:d3:d4:cc:c2:2d:5b:41:99:47:9a:08:d3:e7:
20:cb:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:45 2026 by rpki-client